I have a malware sample. I want to know what vulnerabilities does it exploit (and of which software). I tried analyzing it in IDA Free and it seems that the code was developed in Visual C/C++ runtime. I know that C/C++ code is hard to decompile. Can anyone tell me how do I find what vulnerabilities does the malware exploit without having to decompile the malware? I don't need an exact methodology. Even pointers to think would be helpful. Thanks.
closed as too broad by Terry Chia, Xander, TildalWave, tylerl, NULLZ Sep 7 '13 at 1:19
There are either too many possible answers, or good answers would be too long for this format. Please add details to narrow the answer set or to isolate an issue that can be answered in a few paragraphs.If this question can be reworded to fit the rules in the help center, please edit the question.
There are two sort of malware analysis dynamic and static each has its own pros and cons. As you are trying to reverse engineer the malicious code you may require adequate machine language knowledge to analyze the code and identifying different routines. The second way is go with dynamic analysis by executing the code in the sandbox environment. There are few open source automated malware analysis tools like cukoo that can identify the threat data the malware is trying to exploit